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ENABLING CONTINUOUS MONITORING AND IMPROVEMENT OF GRC 
EFFECTIVENESS WITH QUALYSGUARD AND BRINQA 


An effectively implemented GRC platform not only automates compliance-related activities and risk management, but also provides 
a strategic governance foundation for all enterprise initiatives and programs. The integration of QualysGuard with Brinqa Risk 
Manager provides a solid and extensible platform for policy management, compliance management, process governance, incident 
management, and threat and vulnerability management. 


A governance, risk management, and compliance (GRC) solutions provider. 
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Integration Benefits 


Full network asset life-cycle: Asset discovery and life-cycle management are enhanced with this solution. For customers 
who lack a centralized asset repository and the associated management functions, the combination of QualysGuard asset 
discovery with Bringa’s asset life-cycle management and asset classification provides the solution. 


Integrated risk scoring: Vulnerability and policy compliance reports are factored into Brinqa’s application risk scoring model, 
compliance management metrics and scorecards. There is both a need and advantage to the consolidation of data-sources 
including vulnerability and policy compliance data to come up with a comprehensive application risk score for critical applications. 
Through the combination of Bringa’s asset model and scoring methodology and QualysGuard’s vulnerability reporting, we provide 
customers with an automated, quantitative application risk assessment. 


Comprehensive metric scorecards: The Bringa policy and compliance metrics scorecard provides a library of vulnerability 
management metrics that utilize the QualysGuard data to create an overall scorecard for the program and operations. 


Automated Controls Monitoring: The Bringa controls monitoring utilizes the QualysGaurd policy compliance results to 
provide automated and continuous compliance assurance. With integration of Bringa’s control testing and QualysGuard policy 
compliance data, we provide customers with a centralized and harmonized approach to compliance. 


Enabling Continuous Monitoring and Improvement of GRC Effectiveness with QualysGuard and Bringa 


Bringa’s QualysGuard connector provides a simple mechanism for importing asset, vulnerability and policy compliance data 

into Brinqa’s Risk Manager. The integrated Bringa Risk Manager and QualysGuard Vulnerability Manager solution delivers 
comprehensive and relevant application risk scoring and automated compliance assurance to your enterprise. Data-rich risk 
management dashboards and reports provide CIO level views of your company’s overall risk posture and compliance status with 


drill down capabilities into detailed views. 
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About Bringa 

Bringa provides enterprises and government agencies with governance, risk 
management, and compliance solutions that enable the continuous improvement 
of operational and regulatory efficiencies and effectiveness. Bringa’s offering is 
the most comprehensive available on the market today, based on our forward- 
thinking vision of a centralized, fully automated, and re-usable governance, risk 
and compliance (GRC) platform combined with targeted applications to meet 
program specific GRC needs. 


Brinqa’s flagship product, the Bringa GRC Platform provides a solid and 
extensible platform for compliance management, policy management, process 
governance and incident management. In addition to the Bringa GRC Platform, 
Bringa offers out-of-the-box applications such as Risk Manager, Privacy Manager, 
Vendor Risk Manager and Business Continuity Manager. 


For more information, visit www.bringa.com. 
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www.qualys.com http://www.qualys.com 


Qualys is a global company with offices around the world. To find an office near you, visit 
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About Qualys 

Qualys, Inc. is the leading provider of Softare-as-a-Service (SaaS) IT security risk 
and compliance management solutions — delivered as a service. Qualys solutions 
are deployed in a matter of hours anywhere in the world, providing customers an 
immediate and continuous view of their security and compliance postures. 


The QualysGuard® service is used today by more than 5,000 organizations in 85 
countries, including 47 of the Fortune Global 100, and performs more than 500 
million IP audits per year. Qualys has the largest vulnerability management 
deployment in the world at a Fortune Global 50 company, and has been 
recognized by leading industry analysts for its market leadership. Qualys was 
named Best Security Company in the 2011 SC Awards U.S. 


Qualys has established strategic agreements with leading managed service 
providers and consulting organizations including BT, Etisalat, Fujitsu, IBM, I(TS)2, 
LAC, NTT, SecureWorks, Symantec, Tata Communications and TELUS. Qualys is 
a founding member of the Cloud Security Alliance (CSA). 


For more information, visit www.qualys.com. 
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